AppSec Skills

Scans codebases, configuration files, and git history for exposed credentials, API keys, tokens, and other sensitive secrets that should not be committed.

Analyzes project dependencies for known vulnerabilities (CVEs), license compliance issues, outdated packages, and supply chain security risks.

Conducts automated security assessments including reconnaissance, vulnerability scanning, exploitation verification, and penetration testing report generation.